Configuring Advanced IKE Settings | ZyXEL Communications P-2602

P-2602H(W)(L)-DxA Series User’s Guide

17.12.2 Diffie-Hellman (DH) Key Groups

Diffie-Hellman (DH) is a public-key cryptography protocol that allows two parties to establish a shared secret over an unsecured communications channel. Diffie-Hellman is used within IKE SA setup to establish session keys. 768-bit (Group 1 - DH1) and 1024-bit (Group 2 – DH2) Diffie-Hellman groups are supported. Upon completion of the Diffie-Hellman exchange, the two peers have a shared secret, but the IKE SA is not authenticated. For authentication, use pre-shared keys.

17.12.3 Perfect Forward Secrecy (PFS)

Enabling PFS means that the key is transient. The key is thrown away and replaced by a brand new key using a new Diffie-Hellman exchange for each new IPSec SA setup. With PFS enabled, if one key is compromised, previous and subsequent keys are not compromised, because subsequent keys are not derived from previous keys. The (time-consuming) Diffie- Hellman exchange is the trade-off for this extra security.

This may be unnecessary for data that does not require such security, so PFS is disabled (None) by default in the ZyXEL Device. Disabling PFS means new authentication and encryption keys are derived from the same root secret (which may have security implications in the long run) but allows faster SA setup (by bypassing the Diffie-Hellman key exchange).

17.13 Configuring Advanced IKE Settings

Click Advanced in the Edit VPN Policies screen to open this screen.

236	Chapter 17 VPN Screens

Image 236

ZyXEL Communications P-2602 Configuring Advanced IKE Settings, Diffie-Hellman DH Key Groups, Perfect Forward Secrecy PFS

Contents

2602HWL Series Page Copyright DisclaimerTrademarks 2602HWL-DxA Series User’s Guide Certifications CertificationsViewing Certifications Safety Warnings Safety Warnings ZyXEL Limited Warranty ZyXEL Limited Warranty Customer Support Customer Support Norway Table of Contents Chapter VoIP Wizard And Example Chapter LAN Setup 107 141 156 Chapter Phone Usage 179 Chapter Firewall Configuration 193 Chapter VPN Screens 221 Chapter Static Route 249 Chapter System 289 Chapter Diagnostic 315 Appendix B Splitters and Microfilters 339 Appendix F Services 371 Appendix G Firewall Commands 375 Index 421 List of Figures List of Figures Bandwidth Management Wizard General Information Firewall Example Edit Rule Destination Address 205 Telecommuters Using Unique VPN Rules Example 246 FTP Session Example of Firmware File Upload 312 Peer-to-Peer Communication in an Ad-hoc Network 361 List of Tables List of Tables 139 228 333 389 2602HWL-DxA Series User’s Guide List of Tables Preface About This Users GuideRelated Documentation User Guide Feedback Graphics Icons Key Dslam Getting To Know the ZyXEL Device Introducing the P-2602HWL-Dx SeriesModels Covered Getting To Know the ZyXEL Device Features Built-in SwitchHigh Speed Internet Access Adsl Standards Zero Configuration Internet Access Auto Firmware UpgradeAny IP Auto Provisioning Content Filtering Network Address Translation NATMedia Bandwidth Management Dynamic Jitter Buffer Echo Cancellation QoS Quality of ServiceOther PPPoE Features Universal Plug and Play UPnP Wireless Features W models only Ieee 802.11g+ Wireless LAN Wireless LAN MAC Address FilteringWi-Fi Protected Access External Antenna Internet Access Making Calls via Internet Telephony Service ProviderApplications for the ZyXEL Device Internet Single User Account Firewall for Secure Broadband Internet Access Make Peer-to-peer Calls LAN to LAN Application Firewall Application LED Color Status Description Power LEDsEthernet Wlan 2602HWL-DxA Series User’s Guide LEDs LED Color Status Description DSLInternet Phone 1 Introducing the Web Configurator Web Configurator OverviewAccessing the Web Configurator Introducing the Web Configurator Password Screen Reset Button Using The Reset Button Web Configurator Main Screen Title Bar Web Configurator Icons in the Title Bar Navigation PanelNavigation Panel Summary Icon Description Mgmt 2602HWL-DxA Series User’s Guide Navigation Panel SummaryVPN Main Window Status BarPage Internet and Wireless Setup Wizard Internet Access Wizard SetupInternet and Wireless Setup Wizard Introduction Wizard Welcome Manual Configuration Auto-Detection PPPoE Label Description PPPoEVPI VCI Internet Connection with PPPoE Internet Connection with RFC Internet Connection with Enet Encap Internet Connection with PPPoA Connection Test Failed-1 Wireless Connection Wizard Setup Connection Test Successful Wireless LAN Setup Wizard Wireless LAN Manually Assign a WPA key Internet and Wireless Setup Wizard Manually Assign a WPA key Manually Assign a WEP key Manually Assign a WPA key Wireless LAN Setup Manually Assign a WEP key 2602HWL-DxA Series User’s Guide VoIP Wizard And Example VoIP Wizard SetupVoIP Wizard And Example Wizard Welcome VoIP Wizard And Example VoIP Wizard Configuration Sample SIP Account Information 2602HWL-DxA Series User’s Guide VoIP Wizard Configuration SIP Registration Test VoIP Wizard Fail 2602HWL-DxA Series User’s Guide VoIP Wizard And Example Predefined Media Bandwidth Management Services Media Bandwidth Management Setup ServicesService Description Bandwidth Management Wizard Bandwidth Management Wizard Setup Tftp Click Bandwidth Management Setup Following fields describe the label in this screen Bandwidth Management Wizard Complete 2602HWL-DxA Series User’s Guide Bandwidth Management Wizard Status Screens Status Screen Status Screen VPI/VCIDhcp Ssid This in Maintenance System Time Setting 253 Settings Can change these in VoIP SIP SIP SettingsAny IP Table 2602HWL-DxA Series User’s Guide Status Screen Any IP Table Wlan Status W models onlyPacket Statistics Packet Statistics VoIP Statistics VoIP Statistics Status Screens VoIP Statistics Interval 2602HWL-DxA Series User’s Guide Status Screens WAN Setup WAN OverviewEncapsulation Enet Encap Multiplexing VPI and VCI 6 NAT IP Address AssignmentNailed-Up Connection PPP Metric Traffic Shaping Variable Bit Rate VBR ATM Traffic ClassesConstant Bit Rate CBR Unspecified Bit Rate UBR Zero Configuration Internet AccessInternet Access Setup Internet Access Setup Encap or PPPoE 2602HWL-DxA Series User’s Guide Internet Access Setup 100 WAN SetupEnet Encap Enet Encap in the Encapsulation field Advanced Internet Access Setup WAN Setup 101 102 WAN Setup WAN More Connections WAN Setup 103 Traffic Redirect Traffic Redirect Example WAN Setup 105 WAN Backup SetupWAN Backup Setup 2602HWL-DxA Series User’s Guide WAN Backup Setup 106 WAN Setup LANs, WANs and the ZyXEL Device LAN SetupLAN Overview Dhcp Setup IP Pool Setup108 LAN Setup DNS Server Address IP Address and Subnet Mask LAN Setup 109DNS Server Address Assignment Private IP Addresses RIP Setup110 LAN Setup Any IP LAN Setup 111Multicast 112 LAN Setup How Any IP Works Configuring LAN IP Configuring Advanced LAN SetupLAN Setup 113 LAN TCP/IP 114 LAN Setup TCP/IP LAN Setup 115 Dhcp SetupDhcp Setup 2602HWL-DxA Series User’s Guide Dhcp Setup LAN Client List LAN Client List LAN Setup 117LAN IP Alias Physical Network & Partitioned Logical Networks LAN IP Alias LAN Setup 119 2602HWL-DxA Series User’s Guide 120 LAN Setup Wireless LAN 121 Wireless LANWireless Network Overview Wireless Security Overview 122 Wireless LANSsid MAC Address Filter User Authentication Types of Encryption for Each Type of AuthenticationWireless LAN 123 Weakest Strongest No Authentication Radius Server Wireless Performance Overview Quality of Service QoS124 Wireless LAN One-Touch Intelligent Security Technology Otist Additional Wireless Terms Wireless LAN 125General Wlan Screen Term Description 126 Wireless LAN No Security Wireless LAN 127 WEP Encryption Screen 128 Wireless LAN 3 WPA2-PSK Wireless WPA2-PSK Wireless LAN 129 4 WPA2 Authentication Screen 130 Wireless LAN Wireless LAN Advanced Setup Wireless LAN 131 Wireless LAN Advanced 132 Wireless LAN802.11g Only mode RTS/CTS Wireless LAN 133 Setup Key Type a key password 8 Ascii characters longSecurity Mode to WPA-PSK , and enter the Pre-Shared Key Otist Screen Example Wireless Client Otist Screen Otist In Progress on the Wireless Device Start OTIST? 136 Wireless LAN MAC Filter Wireless LAN 137 QoS Screen Application Priority Configuration 2602HWL-DxA Series User’s Guide Wireless LAN QoSApplication Priority Configuration screen Policy Application Priority Configuration Wireless LAN 139FTP WWW 2602HWL-DxA Series User’s Guide 140 Wireless LAN Network Address Translation NAT Screens NAT OverviewNAT Definitions NAT Definitions What NAT Does How NAT Works Network Address Translation NAT Screens 143 NAT ApplicationNAT Mapping Types NAT General Setup SUA Single User Account Versus NATNAT Mapping Types 144 Network Address Translation NAT Screens Port Forwarding Network Address Translation NAT Screens 145 Configuring Servers Behind Port Forwarding Example Default Server IP AddressPort Forwarding Services and Port Numbers Configuring Port Forwarding Network Address Translation NAT Screens 147 148 Network Address Translation NAT Screens Port Forwarding Rule Edit2602HWL-DxA Series User’s Guide Port Forwarding Network Address Translation NAT Screens 149 2602HWL-DxA Series User’s Guide Port Forwarding Rule SetupSIP ALG Page Voice Introduction to VoIP11.2 SIP SIP Identities SIP Service Domain SIP Call ProgressionSIP Servers SIP Call Progression SIP User Agent SIP Proxy Server SIP Settings Screen SIP Redirect ServerSIP Register Server 154 Voice Voice 155 Server Port field Pulse Code Modulation Voice Coding11.3.1 RTP 11.5.1 G.711 Pstn Call Setup Signaling MWI Message Waiting IndicationCustom Tones IVR Recording Custom Tones Advanced SIP Setup Screen Listening to Custom TonesDeleting Custom Tones 158 Voice VoIP SIP Settings Advanced Voice 159 VoIP SIP Settings Advanced 160 Voice Voice 161 Quality of Service QoS Type Of Service ToSDiffServ Dscp and Per-Hop Behavior Voice 163 VlanSIP QoS Screen Echo Cancellation PhonePstn Line L models only Voice Activity Detection/Silence Suppression Analog Phone Screen Voice 165SIP1 SIP2 166 Voice Advanced Analog Phone Setup Screen2602HWL-DxA Series User’s Guide Phone Analog Phone Dialing Interval Select in VoIP Phone Analog Phone Common Phone Settings ScreenVoice 167 Supplementary Phone Services Overview Europe Type Supplementary Phone ServicesEuropean Flash Key Commands Flash Key European Call Hold European Call WaitingEuropean Call Transfer Voice 169 USA Type Supplementary Services USA Flash Key CommandsEuropean Three-Way Conference USA Call Hold Phone Region Screen USA Call WaitingUSA Call Transfer USA Three-Way Conference 172 Voice Speed DialPeer-to-Peer Calls Dial Phone Book section Speed Dial ScreenVoice 173 174 Voice Incoming Call Policy Screen2602HWL-DxA Series User’s Guide Phone Book Speed Dial Phone Book Incoming Call Policy Voice 175 Pstn Line Screen L models only 176 VoiceCondition Incoming Call Number to the Forward to Number Pstn Line General Voice 177 2602HWL-DxA Series User’s Guide 178 Voice Using Speed Dial to Dial a Telephone Number Phone UsageDialing a Telephone Number Internal Calls Auto Firmware Upgrade 180 Phone Usage Firewalls Firewall OverviewTypes of Firewalls Packet Filtering Firewalls Introduction to ZyXEL’s Firewall Application-level FirewallsStateful Inspection Firewalls 182 Firewalls Denial of Service Denial of Service AttacksBasics Firewalls 183 Types of DoS Attacks 2602HWL-DxA Series User’s Guide Common IP Ports SYN Flood Firewalls 185 Illegal Commands NetBIOS and Smtp Icmp Vulnerability Stateful Inspection Traceroute 188 Firewalls Stateful Inspection ProcessStateful Inspection on Your ZyXEL Device Firewalls 189 TCP Security13.5.4 UDP/ICMP Security Guidelines for Enhancing Security with Your Firewall Upper Layer ProtocolsSecurity In General 190 Firewalls Firewalls 191 Packet Filtering Vs FirewallPacket Filtering When To Use Filtering When To Use The FirewallFirewall 192 Firewalls Firewall Configuration Access MethodsFirewall Configuration 193 Firewall Policies Overview Rule Checklist 194 Firewall ConfigurationRule Logic Overview Security Ramifications Key Fields For Configuring Rules Connection Direction Alerts General Firewall PolicyLAN to WAN Rules Firewall Configuration 197 Firewall Rules SummaryFirewall General WAN to WAN / Router , WAN to LAN 198 Firewall Configuration General screen Configuring Firewall Rules Firewall Configuration 199 Firewall Edit Rule 200 Firewall Configuration Firewall Configuration 201 Firewall Edit RuleRange Address , Subnet Address and Any Address Edit Customized Services Configuring a Customized ServiceCustomized Services 202 Firewall Configuration Firewall Configuration 203 Example Firewall Rule Firewall Example Rules Edit Custom Port Example Firewall Configuration 205 Firewall Example Edit Rule Destination Address Firewall Example Edit Rule Select Customized Services 206 Firewall Configuration Threshold Values Firewall Configuration 207DoS Thresholds TCP Maximum Incomplete and Blocking Time 208 Firewall ConfigurationHalf-Open Sessions Label Description Default Values Configuring Firewall ThresholdsFirewall Configuration 209 210 Firewall Configuration 2602HWL-DxA Series User’s Guide Firewall ThresholdNot set Maximum Incomplete High to lower Than the current Maximum Incomplete Low Configuring Keyword Blocking Content FilteringContent Filtering Overview Configuring the Schedule Content Filter Keyword Content Filtering 213 Configuring Trusted ComputersContent Filter Schedule 2602HWL-DxA Series User’s Guide 214 Content Filtering Introduction to IPSec VPN OverviewIPSec Security Association Data Origin Authentication IPSec ArchitectureVPN Applications Data Confidentiality Encapsulation IPSec AlgorithmsKey Management Introduction to IPSec 217 Transport Mode Tunnel ModeIPSec and NAT 218 Introduction to IPSec Security Protocol Mode NAT VPN and NATIntroduction to IPSec 219 ESP 2602HWL-DxA Series User’s Guide 220 Introduction to IPSec AH Authentication Header Protocol VPN Screens17.1 VPN/IPSec Overview IPSec Algorithms 222 VPN Screens My IP Address2602HWL-DxA Series User’s Guide AH and ESP VPN Setup Screen Secure Gateway AddressDynamic Secure Gateway Address VPN Screens 223 VPN Setup 224 VPN Screens IKE screen to Keep AliveVPN Screens 225 17.7 VPN, NAT, and NAT Traversal 226 VPN Screens VPN Screens 227 ID Type and ContentRemote DNS Server Local ID Type and Content Fields Peer ID Type and Content FieldsLocal ID TYPE= CONTENT= Peer ID TYPE= CONTENT= Editing VPN Policies ID Type and Content ExamplesPre-Shared Key Edit VPN Policies 230 VPN Screens VPN Screens 231 0.0 2602HWL-DxA Series User’s Guide Edit VPN Policies 232 VPN Screens VPN Screens 233 Secure Gateway Address field description IKE Phases 234 VPN Screens Negotiation Mode VPN Screens 235 Configuring Advanced IKE Settings Diffie-Hellman DH Key GroupsPerfect Forward Secrecy PFS 236 VPN Screens VPN Screens 237 VPN IKE 2602HWL-DxA Series User’s Guide Advanced VPN Policies 238 VPN Screens Manual Key Setup Configuring Manual KeySecurity Parameter Index SPI VPN Screens 239 240 VPN Screens SPI 2602HWL-DxA Series User’s Guide VPN Manual Key VPN Screens 241 Viewing SA Monitor 242 VPN Screens VPN SA Monitor VPN Screens 243 Configuring Global Setting Telecommuter VPN/IPSec ExamplesTelecommuters Sharing One VPN Rule Example 244 VPN Screens Fields Telecommuters Headquarters Telecommuters Using Unique VPN Rules ExampleVPN Screens 245 246 VPN Screens Telecommuters Headquarters VPN and Remote Management VPN Screens 247 2602HWL-DxA Series User’s Guide 248 VPN Screens Configuring Static Route Static RouteStatic Route Static Route 249 Static Route Edit 250 Static Route Static Route Edit Static Route 251 2602HWL-DxA Series User’s Guide 252 Static Route Bandwidth Management Bandwidth Management OverviewApplication-based Bandwidth Management Subnet-based Bandwidth Management Application and Subnet-based Bandwidth Management SchedulerPriority-based Scheduler Application and Subnet-based Bandwidth Management Example Maximize Bandwidth Usage Fairness-based SchedulerReserving Bandwidth for Non-Bandwidth Class Traffic Bandwidth Management 255 Maximize Bandwidth Usage Example Priority-based Allotment of Unused and Unbudgeted BandwidthMaximize Bandwidth Usage Example 256 Bandwidth Management Configuring Summary Bandwidth Management PrioritiesFairness-based Allotment of Unused and Unbudgeted Bandwidth Bandwidth Management Priorities Media Bandwidth Management Summary 258 Bandwidth Management Bandwidth Management Rule Setup Bandwidth Management 259 Rule Configuration Bandwidth Management Rule Configuration 260 Bandwidth Management Rule Configuration Bandwidth Management 261 Bandwidth Monitor Bandwidth Management Monitor 262 Dynamic DNS Setup Configuring Dynamic DNSDynamic DNS Setup 263 Dynamic DNS Overview 264 Dynamic DNS Setup Dynamic DNS Dynamic DNS Setup 265 2602HWL-DxA Series User’s Guide 266 Dynamic DNS Setup Remote Management Configuration Remote Management Configuration 267Remote Management Overview Remote Management Limitations Remote Management and NAT System Timeout21.2 WWW Configuring Telnet Remote Management Configuration 269Telnet Remote Management WWW Configuring FTP 270 Remote Management Configuration Remote Management Configuration 271 Snmp 272 Remote Management Configuration Supported MIBs Configuring Snmp Remote Management Configuration 273Snmp Traps Snmp Traps 274 Remote Management Configuration Remote Management Snmp Remote Management Configuration 275 Configuring DNSConfiguring Icmp 276 Remote Management Configuration Remote Management Icmp How do I know if Im using UPnP? Universal Plug-and-Play UPnPIntroducing Universal Plug and Play NAT Traversal Configuring UPnP UPnP and ZyXEL Universal Plug-and-Play UPnP 279 Installing UPnP in Windows ExampleConfiguring UPnP Add/Remove Programs Windows Setup Communication Add/Remove Programs Windows Setup Communication Components Network Connections Windows Optional Networking Components Wizard Using UPnP in Windows XP Example 282 Universal Plug-and-Play UPnP Network Connections Internet Connection Properties Advanced Settings Internet Connection Properties Advanced Settings Add System Tray Icon Internet Connection Status 286 Universal Plug-and-Play UPnP Network Connections My Network Places Page General Setup and System Name General SetupSystem System 289 System General Setup 290 System Time Setting System 291 2602HWL-DxA Series User’s Guide System Time Setting 292 System System 293 2602HWL-DxA Series User’s Guide 294 System Logs Logs OverviewViewing the Logs Alerts and Logs Configuring Log Settings 296 Logs Log Settings Logs 297 2602HWL-DxA Series User’s Guide Log Settings 298 Logs Smtp Error Messages Smtp Error MessagesExample E-mail Log Logs 299 Mail Log Example 300 Logs Tools 301 ToolsIntroduction Filename Conventions File Maintenance Over WAN Firmware Upgrade ScreenFilename Conventions 302 Tools Firmware Upgrade Backup and Restore 304 Tools Backup Configuration Restore ConfigurationRestore Configuration Tools 305 Configuration Upload Successful Reset to Factory Defaults Restart Using FTP or Tftp to Back Up Configuration Using the FTP Commands to Back Up ConfigurationFTP Command Configuration Backup Example 308 Tools Configuration Backup Using GUI-based FTP Clients Backup Configuration Using TftpGeneral Commands for GUI-based FTP Clients Command Description Using FTP or Tftp to Restore Configuration Tftp Command Configuration Backup ExampleConfiguration Backup Using GUI-based Tftp Clients General Commands for GUI-based Tftp Clients FTP and Tftp Firmware and Configuration File Uploads Restore Using FTP Session ExampleFTP File Upload Command from the DOS Prompt Example Tools 311 312 Tools FTP Session Example of Firmware File UploadTftp File Upload Tftp Upload Command Example Tools 313 2602HWL-DxA Series User’s Guide 314 Tools Diagnostic General DiagnosticDSL Line Diagnostic Diagnostic 315 Diagnostic DSL Line 316 Diagnostic Diagnostic 317 Signal coming into the ZyXEL Device from the ISP 2602HWL-DxA Series User’s Guide 318 Diagnostic Problems with the LAN TroubleshootingProblems Starting Up the ZyXEL Device Problems with the WAN Troubleshooting the WAN320 Troubleshooting Internet light is Problems Accessing the ZyXEL Device Troubleshooting Accessing Your DeviceTroubleshooting 321 Pop-up Windows, JavaScripts and Java Permissions 322 Troubleshooting Internet Explorer Pop-up Blockers Troubleshooting 323 Internet Options 324 Troubleshooting Troubleshooting 325 JavaScripts 326 Troubleshooting Troubleshooting 327 Java Permissions Security Settings Java 328 Troubleshooting Troubleshooting 329 Telephone ProblemsTroubleshooting Telephone Problems With Multiple SIP Accounts Outgoing Calls Incoming Calls Default Incoming Calls 2602HWL-DxA Series User’s Guide 332 Troubleshooting Appendix a Product Specifications 333 Specification TablesDevice Specifications RIP I/RIP 2602HWL-DxA Series User’s Guide Firmware Specifications334 Appendix a Product Specifications Appendix a Product Specifications 335 WPA2WMM NAT/SUA 336 Appendix a Product Specifications 2602HWL Series Power Adaptor Specifications2602HWL Series Power Adaptor Specifications Appendix a Product Specifications 337 United Kingdom Plug StandardsPage Appendix B Splitters and Microfilters 339 Connecting a Pots SplitterTelephone Microfilters Connecting a Microfilter ZyXEL Device With Isdn Appendix C Setting up Your Computer’s IP Address 341 Windows 95/98/Me Installing Components 342 Appendix C Setting up Your Computer’s IP Address Configuring Appendix C Setting up Your Computer’s IP Address 343 Windows 2000/NT/XP Verifying Settings344 Appendix C Setting up Your Computer’s IP Address Windows XP Start Menu Windows XP Control Panel Windows XP Control Panel Network Connections Properties Windows XP Local Area Connection Properties Windows XP Advanced TCP/IP Settings Appendix C Setting up Your Computer’s IP Address 347 348 Appendix C Setting up Your Computer’s IP Address Windows XP Internet Protocol TCP/IP Properties Appendix C Setting up Your Computer’s IP Address 349 Macintosh OS 8/9 Macintosh OS Macintosh OS 8/9 TCP/IP Appendix C Setting up Your Computer’s IP Address 351 Macintosh OS X NetworkPage Appendix D IP Addresses and Subnetting 353 Introduction to IP AddressesIP Address Classes and Hosts IP Address Classes and Network ID Classes of IP AddressesAllowed IP Address Range By Class 354 Appendix D IP Addresses and Subnetting Subnet Masks SubnettingNatural Masks Alternative Subnet Mask Notation Example Two Subnets Two Subnets Example356 Appendix D IP Addresses and Subnetting IP/SUBNET Mask Network Number Host ID Appendix D IP Addresses and Subnetting 357 Example Four SubnetsSubnet 358 Appendix D IP Addresses and Subnetting Example Eight Subnets2602HWL-DxA Series User’s Guide Subnet Subnetting With Class a and Class B Networks Eight SubnetsClass C Subnet Planning Appendix D IP Addresses and Subnetting 359 Class B Subnet Planning 360 Appendix D IP Addresses and Subnetting Appendix E Wireless LANs 361 Wireless LAN TopologiesAd-hoc Wireless LAN Configuration Basic Service Set 362 Appendix E Wireless LANs Appendix E Wireless LANs 363 Channel 364 Appendix E Wireless LANs Fragmentation Threshold Appendix E Wireless LANs 365 Preamble Type Types of Radius Messages 366 Appendix E Wireless LANsIeee EAP-MD5 Message-Digest Algorithm Types of AuthenticationAppendix E Wireless LANs 367 EAP-TTLS Tunneled Transport Layer Service 368 Appendix E Wireless LANsEAP-TLS Transport Layer Security Peap Protected EAP EAP-MD5 EAP-TLS EAP-TTLS Peap Leap Comparison of EAP Authentication TypesAppendix E Wireless LANs 369 Security Parameters Summary Wireless Security Relational Matrix370 Appendix E Wireless LANs Name Protocol Ports Description Examples of ServicesAppendix F Services 371 2602HWL-DxA Series User’s Guide Examples of Services 372 Appendix F Services Appendix F Services 373 Vdolive TCP 374 Appendix F ServicesTftp UDP Sys Firewall Commands Sys Firewall CommandsAppendix G Firewall Commands 375 Command DescriptionPage Appendix H Triangle Route 377 Ideal SetupTriangle Route Problem 378 Appendix H Triangle Route Triangle Route SolutionsIP Aliasing Gateways on the WAN Side Gateways on the WAN Side Appendix H Triangle Route 379Page LOG Message Description System Maintenance LogsAppendix I Log Descriptions 381 2602HWL-DxA Series User’s Guide System Maintenance Logs System Error LogsAccess Control Logs 382 Appendix I Log Descriptions 2602HWL-DxA Series User’s Guide TCP Reset Logs Packet Filter LogsAppendix I Log Descriptions 383 TCP Maximum Incomplete in the Firewall Attack Alerts screen 2602HWL-DxA Series User’s Guide Icmp Logs 384 Appendix I Log Descriptions Content Filtering Logs System forwarded web contentAttack Logs Appendix I Log Descriptions 385 386 Appendix I Log Descriptions 2602HWL-DxA Series User’s Guide Attack Logs802.1X Logs ACL Setting Notes Icmp NotesAppendix I Log Descriptions 387 Packet Direction Description 388 Appendix I Log Descriptions 2602HWL-DxA Series User’s Guide Icmp NotesSyslog Logs FSM Logs Caller Side FSM Logs Callee SidePstn Logs Appendix I Log Descriptions 389 Log Commands Configuring What You Want the ZyXEL Device to LogRFC-2408 Isakmp Payload Types 390 Appendix I Log Descriptions Displaying Logs Appendix I Log Descriptions 391 Log Command Example 392 Appendix I Log Descriptions Appendix J Command Interpreter 393 Command SyntaxCommand Usage Page Appendix K Internal Sptgen 395 Configuration Text File FormatInternal Sptgen Overview Internal Sptgen FTP Download Example 396 Appendix K Internal Sptgen Appendix K Internal Sptgen 397 Internal Sptgen FTP Upload ExampleExample Internal Sptgen Screens Abbreviation Meaning Menu 1 General Setup398 Appendix K Internal Sptgen Appendix K Internal Sptgen 399 Dhcp 400 Appendix K Internal Sptgen Menu 4 Internet Access Setup Appendix K Internal Sptgen 401 2602HWL-DxA Series User’s Guide Menu 4 Internet Access Setup 402 Appendix K Internal Sptgen Appendix K Internal Sptgen 403 2602HWL-DxA Series User’s Guide Menu 404 Appendix K Internal Sptgen Appendix K Internal Sptgen 405 406 Appendix K Internal Sptgen Menu 15 SUA Server Setup Appendix K Internal Sptgen 407 2602HWL-DxA Series User’s Guide Menu 15 SUA Server Setup 408 Appendix K Internal Sptgen Menu 21.1 Filter Set #1 Appendix K Internal Sptgen 409 2602HWL-DxA Series User’s Guide Menu 21.1 Filter Set #1 410 Appendix K Internal Sptgen Appendix K Internal Sptgen 411 412 Appendix K Internal Sptgen 2602HWL-DxA Series User’s Guide Menu 21.1 Filer Set #2 Appendix K Internal Sptgen 413 414 Appendix K Internal Sptgen Appendix K Internal Sptgen 415 416 Appendix K Internal Sptgen Menu 23 System Menus Appendix K Internal Sptgen 417 418 Appendix K Internal Sptgen 2602HWL-DxA Series User’s Guide Menu 23 System MenusMenu 24.11 Remote Management Control Command Examples Command ExamplesAppendix K Internal Sptgen 419 FIN PVA InputPage Index Index 421 FCC 422 IndexDbpsk Index 423 Http 182, 183 Ofdm 424 IndexItsp Index 425 QoS 41 426 Index SIP URI Index 427 Vlan ID